last executing test programs: 9.184643965s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x20008880) 9.096929699s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@bcast, @null, @default, @bcast, @null, @null, @null, @rose]}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', 0x0}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 8.964509561s ago: executing program 0: setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb018018"], 0x0, 0x26, 0x0, 0x9}, 0x20) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000480)="18", 0x1}], 0x1}}], 0x1, 0x4000000) shutdown(r1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x0, 0x148, 0x140, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth0_to_bond\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES16=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r3 = socket(0x2, 0x3, 0xff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}}, 0x2000c080) 8.626067875s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 8.445001605s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.26556277s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x3f}]}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000e0000000006000000"], 0x14}}, 0x0) 7.068784891s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@bcast, @null, @default, @bcast, @null, @null, @null, @rose]}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', 0x0}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 6.974784461s ago: executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_retopts={{0x10, 0x114, 0x8}}], 0x30}}], 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, r4, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x9}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x50}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x541b, 0x0) 6.797055674s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x20008880) 4.4672763s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@bcast, @null, @default, @bcast, @null, @null, @null, @rose]}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', 0x0}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 4.272765732s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000, 0x0, @loopback}, 0x1c) 4.136079166s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = socket(0x200000100000011, 0x803, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300)=0xffffffffffffffff, 0x4) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x553, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x48) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)=@generic={&(0x7f0000001500)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000300)=""/4096, 0x41000, 0x0, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x1, 0xe, 0x8000, 0x80000001}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001580)=[r5, r6, r7, r8], &(0x7f00000015c0)=[{0x5, 0x5, 0x8, 0xc}, {0x4, 0x3, 0x9, 0x2}, {0x2, 0x1, 0x3, 0xb}, {0x3, 0x2, 0xa, 0x9}, {0x4, 0x4, 0x0, 0x1}, {0x3, 0x5, 0x10, 0xb}, {0x4, 0x4, 0x10, 0xa}, {0x5, 0x1, 0xc, 0xb}], 0x10, 0xdf}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) socket$inet(0x2, 0x6, 0x9) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) 3.799639598s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, @default, @val, @void}, 0x20) 3.058977652s ago: executing program 4: socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800"/15], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0xe63b424644257f3f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) (async) sendfile(0xffffffffffffffff, r2, 0x0, 0xf03a0005) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x6) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000340), 0xfdef) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) openat$cgroup_freezer_state(r3, &(0x7f0000000280), 0x2, 0x0) (async) r4 = socket(0x1d, 0x3, 0x1) unshare(0x6020400) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800), 0x0, 0x0) 2.426802374s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x0, 0xfffffffc, 0x4, 0x1, 0x7fff, '\x00', 0x0, r1, 0x5, 0x5, 0x1, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x2000000008000f28, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000580)="af12101ceaac02ae912156e55d439996a0c50000006e170000002ccf52e61c6b79a9519aeadaa2612dc7a32bf0b46cdbea81008720fa9a70a5ab7a25b3dadf54a8f846fa7381951cf81562497aac7a01476e98d019e2e3ea20c16829df8e5544f29ca3f5d3350edfe3", &(0x7f00000004c0)=@udp6=r4, 0x91349f47ceba1578}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x20, @null, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000140)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.405139806s ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r5 = socket(0x200000100000011, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="4dcdc7d96a760000002f00050000000000060000450b21e9e89291df563213e9152234f5623c526156de8ae4ae9150d3d2dd194a", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) 1.685209946s ago: executing program 2: socket$tipc(0x1e, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f00000001c0)='syzkaller\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 1.553321925s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.323618983s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x20008880) 1.195672329s ago: executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x1, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004801}, 0x20004804) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfd}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bridge_slave_1\x00', 'wg2\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000380), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 1.181303271s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xa, 0x4, @multicast}]}]}}}]}, 0x5c}}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="50000000100001040031cb000000000000000000", @ANYBLOB="0000000000000000300012800b000100697036746e6c000020"], 0x50}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xfffffffc}]}}}]}, 0x40}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r6, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 1.110593294s ago: executing program 1: socket$nl_crypto(0x10, 0x3, 0x15) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, [0x3, 0x0, 0x6f, 0x20000000, 0x7f, 0x0, 0x9, 0x3, 0xe1, 0x8, 0x101, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x6, 0x100]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)={r2, 0x1, 0x74, "5f8080af791eded5c9c62e37b55dd573f2d5d38876b2c86239d94695bf89ba06e21bd99ed2b4622bf962a86d24afa2cb2fa5d90e7ca18db7d4596776b714a5ff70ecb9c60871fa04b7cc936a17a8656a5df224cbb95585bfcfb3eabca7fc62bf3ea9d734c2b84f011444d2b6c137a674b241684c"}, 0x7c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 954.868299ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x5}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x90) 865.194289ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, @default, @val, @void}, 0x20) 284.78533ms ago: executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x605}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4}, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELRULE={0x160, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xffffffc1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x80}]}}}]}, @NFTA_RULE_USERDATA={0x90, 0x7, 0x1, 0x0, "dd979fdf33d14c3a2dcb4fca55b0c4361529141a04b04e6992df30e7134684715009401342e36af8916389cfe6e4196ac4bb56bc5566eb66ded68645c125b5dcce294184d8f22fc3e16cada50bffa4de4f803687db235a13fad2f09a9a3c9e03c142cb28ad6570c9f7729392b2d9c980e487254ffa5f7a00a895494fc1c45e5193d5508e85782aef3f1cea9d"}]}], {0x14}}, 0x188}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004840) 255.829509ms ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001fc0)=@delchain={0x328, 0x65, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}, @filter_kind_options=@f_route={{0xa}, {0x290, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x264, 0x6, [@m_ctinfo={0x78, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x41, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb"}, {0xc}, {0xc}}}, @m_nat={0x9c, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}]}, {0x49, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44"}, {0xc}, {0xc}}}, @m_connmark={0x14c, 0x0, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x869, 0xffffffffffffffff, 0x2d53, 0xfffffbff}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x0, 0x3, 0x5e, 0x9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x8, 0x8, 0x9, 0x4}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffffc, 0x4, 0x9, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x8, 0x101}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8854, 0x5, 0xffffffffffffffff, 0xfffffff9, 0x9ab}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1f, 0x20000000, 0x8}, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8a0}]}]}}]}, 0x328}}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000000000000000000000000000475a47a00"/196]) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x8, 0x101, 0x0, 0x20, 0x2, 0x4}, 0xc) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'}) 236.863642ms ago: executing program 3: sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 150.601619ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x7e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80000, '\x00', 0x0, 0x0, 0x0, 0x3, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x4) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000140)=0x1, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f00000002c0)=@bpq0, 0x10) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r6, 0xfffff000) 143.738258ms ago: executing program 1: socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="4dcdc7d96a760000002f00050000000000060000450b21e9e89291df563213e9152234f5623c526156de8ae4ae9150d3d2dd194a", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 0s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): [ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.596917][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.616900][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.637131][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.662006][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.678388][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.726950][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.746914][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.767135][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.800101][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.825319][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.843795][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.867245][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.919409][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.960004][ T9845] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.987662][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.997865][ T9845] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 227.072910][ T9544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.127076][ T9544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.162650][ T9544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.213155][ T9544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.412969][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.453129][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.490043][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.530378][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.552241][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.583529][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.615219][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.647678][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.696955][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.726977][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.767194][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.789704][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.842268][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.863261][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.896913][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.907739][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.938042][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.028961][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.090564][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.137131][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.177150][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.217577][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.273826][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.316404][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.350165][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.359215][ T9877] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 228.407240][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.417091][ T9877] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.446995][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.486997][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.532729][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.577709][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.594316][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.626944][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.648025][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.670404][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.689832][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.737358][ T9886] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 228.747477][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.763882][ T9880] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 228.854173][ T9518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.876018][ T9518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.907637][ T9518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.935370][ T9518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.178970][ T2467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.207477][ T2467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.328616][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.352767][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.510232][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.549232][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.668813][ T2799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.707344][ T2799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.985813][ T9915] __nla_validate_parse: 4 callbacks suppressed [ 229.985834][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.619979][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.819084][ T9938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.853572][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.905442][ T9938] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 230.943072][ T9942] veth1_macvtap: left promiscuous mode [ 231.115035][ T9951] netlink: 'syz-executor.0': attribute type 28 has an invalid length. [ 231.176236][ T9945] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.378448][ T9958] netlink: 399 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.748995][ T9973] IPv6: Can't replace route, no match found [ 231.959846][ T9981] netlink: 580 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.398416][ T9994] IPVS: Error connecting to the multicast addr [ 232.585714][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 232.663637][T10007] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.682148][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.702313][T10007] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 232.733170][T10009] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 232.862549][T10018] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 233.591947][ T29] audit: type=1804 audit(1718136149.850:2): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2830169063/syzkaller.y9QURh/9/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 233.680983][T10047] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.848209][T10048] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 233.984826][T10060] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 234.644371][T10091] Illegal XDP return value 4294967274 on prog (id 225) dev N/A, expect packet loss! [ 235.008570][T10102] __nla_validate_parse: 11 callbacks suppressed [ 235.008593][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.046751][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.102022][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.421956][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.642926][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.080980][T10134] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.293343][T10137] xt_NFQUEUE: number of total queues is 0 [ 236.364867][T10140] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 236.530788][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.547391][T10140] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 236.994484][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.098489][T10166] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 237.117288][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.202358][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 237.381403][T10176] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 237.418716][T10176] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.795646][T10193] nbd: nbd0 already in use [ 238.028610][T10200] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 238.282360][T10200] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 238.295030][T10200] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 238.312974][T10200] bond1: (slave vcan1): making interface the new active one [ 238.348651][T10200] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 238.593150][T10216] vcan0: Master is either lo or non-ether device [ 238.744669][T10219] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 238.968068][T10236] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 239.551295][T10259] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 239.734338][T10270] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 239.747060][T10270] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 239.781556][T10270] bond2: (slave vcan2): making interface the new active one [ 239.818258][T10270] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 240.190502][T10289] __nla_validate_parse: 6 callbacks suppressed [ 240.190523][T10289] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.237973][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.557937][T10313] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.826383][T10326] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 243.851995][T10326] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.088297][T10342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.113807][T10337] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.173455][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.232049][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.791243][T10352] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.003649][ T5216] IPVS: starting estimator thread 0... [ 245.118494][T10358] IPVS: using max 23 ests per chain, 55200 per kthread [ 245.597927][T10372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.613739][T10371] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 245.783733][T10379] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.878744][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.418936][T10401] atomic_op ffff888079f66198 conn xmit_atomic 0000000000000000 [ 246.630274][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.785581][T10412] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.809767][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.825079][T10412] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 246.893271][T10415] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 247.043046][T10413] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.740196][T10441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.945510][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.008902][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.072050][T10452] delete_channel: no stack [ 248.466375][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.572677][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.609011][T10468] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 249.362628][T10502] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 249.831664][T10514] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 250.002011][T10525] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 250.112922][T10526] dummy0: entered promiscuous mode [ 250.153298][T10526] macvlan2: entered allmulticast mode [ 250.167092][T10526] dummy0: entered allmulticast mode [ 250.182875][T10531] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 251.057430][T10559] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 251.140062][T10565] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 251.153333][T10565] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 251.171756][T10565] bond1: (slave vcan1): making interface the new active one [ 251.184237][T10565] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 251.313331][T10569] __nla_validate_parse: 8 callbacks suppressed [ 251.313355][T10569] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.363815][T10569] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 252.300590][T10598] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.344209][T10598] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 252.644375][T10607] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 252.707078][T10607] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.770730][T10611] syzkaller0: mtu greater than device maximum [ 253.048879][T10627] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.079340][T10627] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 253.637264][ T5132] Bluetooth: hci6: command 0x0406 tx timeout [ 253.772824][T10654] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.827161][T10654] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 254.007596][T10662] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 254.163600][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.401087][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.458047][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.486511][T10675] vlan3: entered promiscuous mode [ 254.503182][T10675] gretap0: entered promiscuous mode [ 254.510981][T10675] vlan3: entered allmulticast mode [ 254.538015][T10675] gretap0: entered allmulticast mode [ 254.567640][T10678] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.603154][T10678] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 255.027885][ C1] hrtimer: interrupt took 1126174 ns [ 256.685109][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.207896][T10751] syz-executor.4[10751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.208052][T10751] syz-executor.4[10751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.258199][T10751] syz-executor.4[10751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.299722][T10751] syz-executor.4[10751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.698737][T10767] syz-executor.3[10767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.747509][T10767] syz-executor.3[10767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.824300][T10773] syz-executor.3[10773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.917840][T10773] syz-executor.3[10773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.372402][T10802] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 258.422449][T10802] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.471352][T10802] team0: entered promiscuous mode [ 258.489449][T10802] team_slave_0: entered promiscuous mode [ 258.512980][T10802] team_slave_1: entered promiscuous mode [ 258.520016][T10808] syz-executor.1[10808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.520238][T10808] syz-executor.1[10808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.560669][T10802] team0: entered allmulticast mode [ 258.615358][T10802] team_slave_0: entered allmulticast mode [ 258.646258][T10802] team_slave_1: entered allmulticast mode [ 258.665000][T10802] bridge0: port 3(team0) entered blocking state [ 258.682450][T10802] bridge0: port 3(team0) entered disabled state [ 258.714626][T10802] bridge0: port 3(team0) entered blocking state [ 258.723981][T10802] bridge0: port 3(team0) entered forwarding state [ 258.930883][T10808] Â: renamed from pim6reg1 [ 259.687688][T10851] batadv_slave_1: entered promiscuous mode [ 259.716242][T10850] batadv_slave_1: left promiscuous mode [ 260.260181][T10876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.433950][T10883] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.161515][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 261.620024][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.657194][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.475316][T10948] sctp: [Deprecated]: syz-executor.3 (pid 10948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.475316][T10948] Use struct sctp_sack_info instead [ 263.877183][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 264.419377][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.479386][T10992] dummy0: entered promiscuous mode [ 264.506276][T10992] macvlan2: entered allmulticast mode [ 264.524964][T10992] dummy0: entered allmulticast mode [ 264.700987][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.790297][T11004] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.142021][T11019] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.634783][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.709963][T11043] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.869597][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.598485][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.626315][T11036] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.283237][T11079] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.509521][T11088] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(146319960437668) <= P.seqno(0) <= S.SWH(146319960437742)) and (P.ackno exists or LAWL(180546411966907) <= P.ackno(180546411966908) <= S.AWH(180546411966908), sending SYNC... [ 267.996520][T11097] Bluetooth: MGMT ver 1.22 [ 268.011675][T11097] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 268.291864][T11112] sock: sock_timestamping_bind_phc: sock not bind to device [ 269.439587][T11145] __nla_validate_parse: 3 callbacks suppressed [ 269.439606][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.867172][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.120813][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.347411][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.398746][T11175] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 270.455062][T11184] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.830782][T11192] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 271.066027][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.182271][T11242] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.229849][T11242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.298284][T11242] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 272.351535][T11232] syzkaller1: entered promiscuous mode [ 272.364515][T11232] syzkaller1: entered allmulticast mode [ 272.470821][T11244] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.616164][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.782264][T11313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.126164][T11321] __nla_validate_parse: 3 callbacks suppressed [ 275.126186][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.178855][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.348780][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.524334][T11336] x_tables: duplicate underflow at hook 2 [ 275.654307][T11340] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 276.349578][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.679397][T11375] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.727703][T11380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.867090][T11382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.951735][T11384] tipc: Can't bind to reserved service type 1 [ 277.290698][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.438206][T11401] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.543583][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.607324][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.647501][T11405] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 277.714746][T11410] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.733516][T11435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.133385][T11449] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 280.453928][ T29] audit: type=1804 audit(1718136196.710:3): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2830169063/syzkaller.y9QURh/74/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 280.571974][T11478] __nla_validate_parse: 7 callbacks suppressed [ 280.571997][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.662719][T11478] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 280.783614][T11478] team0: Port device netdevsim0 added [ 280.842693][T11484] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.196824][T11499] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.257855][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.317659][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.347655][T11500] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 281.504119][T11500] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.853140][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.213116][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.297519][T11513] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 282.442156][T11521] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.640354][ T29] audit: type=1804 audit(1718136198.890:4): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2830169063/syzkaller.y9QURh/79/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 283.223355][T11536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.883418][T11554] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 283.943162][T11554] bond0: (slave netdevsim0): Releasing backup interface [ 283.998024][T11554] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 284.038185][T11554] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 284.067791][T11554] team0: Port device netdevsim0 added [ 284.810543][T11588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.336046][T11619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.401321][T11619] __nla_validate_parse: 7 callbacks suppressed [ 286.401344][T11619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.497057][T11631] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 286.770258][T11642] x_tables: unsorted entry at hook 3 [ 286.869229][T11646] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 287.447978][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805562a800: rx timeout, send abort [ 287.461949][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888066140400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.478462][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888066140c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.601035][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.959526][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805562a800: abort rx timeout. Force session deactivation [ 288.059323][T11662] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 288.238679][T11668] x_tables: duplicate underflow at hook 3 [ 288.294153][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.392909][T11676] x_tables: duplicate underflow at hook 2 [ 289.258578][T11702] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.492244][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.140729][T11731] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 290.358053][T11734] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.655555][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.758158][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.803525][T11750] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 290.893352][T11750] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.908323][T11750] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.917564][T11750] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.930077][T11750] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.998640][T11752] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.573077][T11769] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 292.963212][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.984296][T11807] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 293.055012][T11807] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.075818][T11807] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.085618][T11807] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.095852][T11807] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.165987][T11812] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 293.483075][T11822] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.711024][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.977970][T11824] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.682831][T11852] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 294.766683][T11855] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.268660][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.337182][T11861] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 295.734943][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.751230][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.763835][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.779003][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.797969][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.813305][T11868] bond2: entered promiscuous mode [ 295.821173][ T5132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.837722][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.844084][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.883180][T11872] bond2 (unregistering): Released all slaves [ 296.576484][T11869] chnl_net:caif_netlink_parms(): no params data found [ 296.797174][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.805193][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.833093][T11869] bridge_slave_0: entered allmulticast mode [ 296.854549][T11869] bridge_slave_0: entered promiscuous mode [ 296.896552][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.947148][T11869] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.961795][T11869] bridge_slave_1: entered allmulticast mode [ 296.975361][T11869] bridge_slave_1: entered promiscuous mode [ 297.060543][T11869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.091336][T11869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.179955][T11869] team0: Port device team_slave_0 added [ 297.260562][T11869] team0: Port device team_slave_1 added [ 297.375533][T11869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.397650][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.432307][T11869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.454282][T11869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.464117][T11869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.520716][T11869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.553043][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.720667][T11869] hsr_slave_0: entered promiscuous mode [ 297.778043][T11869] hsr_slave_1: entered promiscuous mode [ 297.821673][T11869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.859939][T11869] Cannot create hsr debugfs directory [ 297.877340][ T5132] Bluetooth: hci1: command tx timeout [ 298.271685][T11869] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.424655][T11869] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.554857][T11869] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.702580][T11869] team0: Port device netdevsim0 removed [ 298.719887][T11869] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.957780][T11869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.980455][T11869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.006247][T11869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.021962][T11869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.248375][T11869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.332897][T11869] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.370795][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.379919][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.419360][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.427533][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.957200][ T5132] Bluetooth: hci1: command tx timeout [ 300.028019][T11869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.667748][T11869] veth0_vlan: entered promiscuous mode [ 300.695595][T11869] veth1_vlan: entered promiscuous mode [ 300.722262][T12010] delete_channel: no stack [ 300.809148][T11869] veth0_macvtap: entered promiscuous mode [ 300.850655][T11869] veth1_macvtap: entered promiscuous mode [ 300.919824][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.948955][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.968296][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.998153][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.023596][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.057659][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.073861][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.081095][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.135222][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.160732][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.206440][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.243572][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.297253][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.341267][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.379864][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.395247][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.435044][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.473079][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.513635][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.551329][T11869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.650875][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.687489][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.707319][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.747338][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.785277][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.822527][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.869332][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.906927][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.966973][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.010131][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.037892][ T5132] Bluetooth: hci1: command tx timeout [ 302.057521][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.142278][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.217025][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.257653][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.270979][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.327003][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.369819][T11869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.396162][T11869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.416360][T11869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.531682][T11869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.578518][T11869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.617587][T11869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.656305][T11869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.894126][ T2467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.920405][ T2467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.988573][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.029766][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.286612][T12053] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 303.321201][T12057] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.347140][T12057] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 303.372642][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.636251][T12069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.677704][T12069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.731126][T12069] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 304.021035][T12072] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 304.118674][ T5132] Bluetooth: hci1: command tx timeout [ 304.765554][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 304.981941][T12107] x_tables: duplicate underflow at hook 2 [ 305.170976][T12118] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 305.208331][T12115] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.233502][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.871771][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.662518][T12165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.721143][T12198] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 307.767113][T12198] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.336079][T12212] Bluetooth: hci3: service_discovery: too big uuid_count value 19456 [ 308.888970][T12225] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.908490][T12225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.935452][T12225] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 309.124039][T12225] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.808789][T12253] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 309.843786][T12253] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.957696][ T5123] Bluetooth: hci5: command 0x0405 tx timeout [ 310.048122][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.090180][T12259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.129667][T12259] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 310.333189][T12259] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.351514][T12284] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.397987][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.439129][T12284] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 311.723787][T12284] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.843567][T12304] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 313.032502][T12339] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 313.457781][T12352] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 315.272220][T12393] __nla_validate_parse: 5 callbacks suppressed [ 315.272241][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.322675][T12393] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 316.008729][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.467850][T12445] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.899584][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.911287][T12467] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 318.050004][T12472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.123550][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.806234][T12485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.918611][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.165966][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.039397][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.577931][T12512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.989202][T12516] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.159051][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.177416][T12519] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 321.728952][T12531] IPVS: Error connecting to the multicast addr [ 322.073953][T12541] tipc: Enabling of bearer rejected, failed to enable media [ 322.118334][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 322.512528][ T5123] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 322.527950][ T5123] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 322.545277][ T5123] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 322.557355][ T5123] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 322.567421][ T5123] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 322.577844][ T5123] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 322.687746][T12550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.031049][T12547] chnl_net:caif_netlink_parms(): no params data found [ 323.418777][T12563] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.496318][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.567568][T12563] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 323.619453][ T5132] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 323.633819][T12574] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 323.676761][ T5132] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 323.697189][ T5132] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 323.708411][ T5132] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 323.719508][ T5132] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 323.733631][ T5132] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 323.790928][T12579] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.927222][T12547] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.951643][T12547] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.974312][T12547] bridge_slave_0: entered allmulticast mode [ 323.993392][T12547] bridge_slave_0: entered promiscuous mode [ 324.092575][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.115151][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.146521][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.158393][T12547] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.171135][T12547] bridge_slave_1: entered allmulticast mode [ 324.182208][T12547] bridge_slave_1: entered promiscuous mode [ 324.326543][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.347905][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.379473][T12547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.405933][T12547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.483602][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.498768][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.599695][T12547] team0: Port device team_slave_0 added [ 324.652848][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.677166][ T5132] Bluetooth: hci9: command tx timeout [ 324.685693][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.739963][T12547] team0: Port device team_slave_1 added [ 324.813580][T12547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.826644][T12547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.865999][T12547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.890460][T12547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.902997][T12547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.943717][T12547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.064303][T12547] hsr_slave_0: entered promiscuous mode [ 325.071764][T12547] hsr_slave_1: entered promiscuous mode [ 325.078804][T12547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.094735][T12547] Cannot create hsr debugfs directory [ 325.242993][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.268219][ T11] bridge_slave_1: left allmulticast mode [ 325.288957][ T11] bridge_slave_1: left promiscuous mode [ 325.311938][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.330132][ T11] bridge_slave_0: left promiscuous mode [ 325.340548][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.405189][ T11] gretap0: left allmulticast mode [ 325.412869][ T11] gretap0: left promiscuous mode [ 325.797636][ T5132] Bluetooth: hci8: command tx timeout [ 325.846004][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.867174][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.885405][ T11] bond0 (unregistering): Released all slaves [ 325.906465][ T11] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 325.921568][ T11] bond1 (unregistering): Released all slaves [ 326.082803][T12575] chnl_net:caif_netlink_parms(): no params data found [ 326.148806][T12606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.382658][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.398530][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.414010][T12616] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 326.442610][T12575] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.453875][T12575] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.465373][T12575] bridge_slave_0: entered allmulticast mode [ 326.473778][T12575] bridge_slave_0: entered promiscuous mode [ 326.537789][T12547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.563966][T12575] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.574803][T12575] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.583659][T12575] bridge_slave_1: entered allmulticast mode [ 326.591879][T12575] bridge_slave_1: entered promiscuous mode [ 326.640347][T12619] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.757459][ T5132] Bluetooth: hci9: command tx timeout [ 326.773622][T12547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.806434][T12575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.826076][T12575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.954029][T12547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.989219][ T11] hsr_slave_0: left promiscuous mode [ 327.007191][ T11] hsr_slave_1: left promiscuous mode [ 327.024958][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.038199][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.052219][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.064856][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.098380][ T11] dummy0: left allmulticast mode [ 327.106652][ T11] dummy0: left promiscuous mode [ 327.116443][ T11] veth1_macvtap: left promiscuous mode [ 327.127166][ T11] veth0_macvtap: left promiscuous mode [ 327.134325][ T11] veth1_vlan: left promiscuous mode [ 327.142887][ T11] veth0_vlan: left promiscuous mode [ 327.840509][ T11] team0 (unregistering): Port device team_slave_1 removed [ 327.877725][ T5132] Bluetooth: hci8: command tx timeout [ 327.920965][ T11] team0 (unregistering): Port device team_slave_0 removed [ 328.435588][T12575] team0: Port device team_slave_0 added [ 328.475224][T12575] team0: Port device team_slave_1 added [ 328.538465][T12547] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 328.567620][T12547] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 328.592909][T12631] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.598031][T12547] team0: Port device netdevsim0 removed [ 328.626423][T12631] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 328.630860][T12547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.649935][T12631] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.837980][T12575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.849210][ T5132] Bluetooth: hci9: command tx timeout [ 328.864340][T12575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.913462][T12575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.931412][T12575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.941586][T12575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.988203][T12575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.167849][T12575] hsr_slave_0: entered promiscuous mode [ 329.205979][T12575] hsr_slave_1: entered promiscuous mode [ 329.232948][T12575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.269560][T12575] Cannot create hsr debugfs directory [ 329.581841][T12547] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.598769][T12647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.618107][T12547] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.691394][T12547] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.739954][T12547] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.812983][T12652] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.828117][T12652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.841775][T12652] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 329.958432][ T5132] Bluetooth: hci8: command tx timeout [ 330.019085][T12547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.047744][T12652] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.083234][T12547] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.112418][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.125905][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.151901][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.160872][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.291132][T12575] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.334467][T12575] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.388450][T12575] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.417959][T12575] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.624427][T12575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.687685][T12575] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.731103][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.744511][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.810135][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.821304][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.894700][T12547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.928006][ T5132] Bluetooth: hci9: command tx timeout [ 330.931638][T12670] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 330.955563][T12670] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.023956][T12673] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 331.026181][T12575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.045473][T12673] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.054534][T12575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.182736][T12547] veth0_vlan: entered promiscuous mode [ 331.245223][T12547] veth1_vlan: entered promiscuous mode [ 331.371899][T12547] veth0_macvtap: entered promiscuous mode [ 331.404122][T12547] veth1_macvtap: entered promiscuous mode [ 331.471769][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.507000][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.523324][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.538063][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.561366][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.583260][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.598823][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.618970][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.634226][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.652048][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.676203][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.700895][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.724793][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.736608][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.751648][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.766399][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.781797][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.796907][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.816743][T12547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.879719][T12575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.893411][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.929856][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.946273][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.966437][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.982097][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.003787][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.022357][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.041151][ T5132] Bluetooth: hci8: command tx timeout [ 332.051138][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.068997][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.085633][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.103821][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.119156][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.133512][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.145051][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.163259][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.176889][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.188740][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.207498][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.223613][T12547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.237922][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.299052][T12547] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.330135][T12547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.350775][T12547] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.364765][T12547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.655262][T12711] xt_cgroup: invalid path, errno=-2 [ 332.679357][T12575] veth0_vlan: entered promiscuous mode [ 332.715990][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.735683][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.808692][T12575] veth1_vlan: entered promiscuous mode [ 332.878130][T12408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.900287][T12408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.923137][T12575] veth0_macvtap: entered promiscuous mode [ 332.952433][T12575] veth1_macvtap: entered promiscuous mode [ 333.010126][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.039713][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.056537][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.071693][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.086246][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.112748][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.125439][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.144268][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.157906][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.174361][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.188162][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.202598][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.220855][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.233719][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.254146][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.272119][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.289509][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.302985][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.313931][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.326694][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.340392][T12575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.382061][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.442407][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.459395][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.491721][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.507988][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.523062][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.536919][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.552054][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.570155][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.606685][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.623263][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.649490][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.664118][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.676404][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.694691][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.708023][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.721839][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.735714][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.752649][T12575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.770446][T12575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.786279][T12575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.801719][T12727] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 333.860224][T12575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.889822][T12575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.927108][T12575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.956773][T12575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.167391][T12740] bridge_slave_1: left allmulticast mode [ 334.175823][T12740] bridge_slave_1: left promiscuous mode [ 334.182999][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.199987][T12740] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 334.257064][T12740] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 334.324251][ T2799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.376768][ T2799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.476721][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.487891][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.610841][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.649881][T12756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.680854][T12756] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 334.729553][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.955143][T12756] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.459803][T12799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.786576][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.895153][T12820] Bluetooth: MGMT ver 1.22 [ 336.159143][T12831] x_tables: duplicate underflow at hook 1 [ 336.932814][T12849] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 338.669889][T12900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.784062][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.806321][T12903] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.445905][T12917] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 339.487618][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.507167][ T29] audit: type=1804 audit(1718136255.760:5): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3931998180/syzkaller.cq6VRT/2/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 339.823858][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.901803][T12929] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.306058][T12939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.610544][T12949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.678269][ T5123] Bluetooth: hci7: command 0x0405 tx timeout [ 340.720246][T12954] x_tables: duplicate underflow at hook 1 [ 340.949734][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.966172][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.136758][T12969] sctp: [Deprecated]: syz-executor.2 (pid 12969) Use of int in maxseg socket option. [ 341.136758][T12969] Use struct sctp_assoc_value instead [ 341.344216][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.397598][T12980] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.458733][T12981] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 341.497874][T12981] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 341.606821][T12987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.413378][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 342.684013][T13037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.904452][T13050] syz-executor.0[13050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.904585][T13050] syz-executor.0[13050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.164650][T13058] bond1: entered promiscuous mode [ 343.201793][T13058] bond1: entered allmulticast mode [ 343.245934][T13058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.874721][T13074] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 343.914892][T13074] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 343.917200][T13089] __nla_validate_parse: 7 callbacks suppressed [ 343.917218][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.968117][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 343.992180][T13089] batadv_slave_1: entered allmulticast mode [ 344.019278][T13089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.030356][T13089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.062040][T13089] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 344.063682][T13094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.690058][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.723861][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.809627][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 344.828159][T13114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 344.840500][T13114] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 344.863231][T13115] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.926587][T13119] netlink: 204152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.037417][T13117] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.050313][T13138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.795280][T13148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.906831][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.939453][T13152] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 347.713167][T13171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.792779][T13173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.893553][T13204] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 348.933894][T13206] __nla_validate_parse: 7 callbacks suppressed [ 348.933916][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.969588][T13209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.108160][T13212] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.219424][T13218] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.292242][T13220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.645105][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.730572][T13222] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.796101][T13222] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 350.221675][T13249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 350.289326][T13251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.337464][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 350.368033][T13254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 350.396416][T13254] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 350.400106][T13260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.603785][T13270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.615256][T13254] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.320181][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.606225][T13304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.822407][T13314] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 352.691899][T13359] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 353.223267][T13378] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 353.242983][T13378] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 354.140088][T13414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.225353][ T5132] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 354.237259][ T5132] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 354.258637][ T5132] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 354.284182][ T5132] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 354.303831][ T5132] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 354.313314][ T5132] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 354.466096][T13425] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 354.612183][T13417] chnl_net:caif_netlink_parms(): no params data found [ 354.761628][T13417] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.774080][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.785412][T13417] bridge_slave_0: entered allmulticast mode [ 354.812994][T13417] bridge_slave_0: entered promiscuous mode [ 354.836503][T13417] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.855967][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.877339][T13417] bridge_slave_1: entered allmulticast mode [ 354.899905][T13417] bridge_slave_1: entered promiscuous mode [ 355.013247][T13417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.031065][T13417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.153213][T13451] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 355.164071][T13451] __nla_validate_parse: 7 callbacks suppressed [ 355.164088][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.223247][T13417] team0: Port device team_slave_0 added [ 355.260820][T13417] team0: Port device team_slave_1 added [ 355.364545][T13417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.383916][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.407614][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.448742][T13460] unsupported nlmsg_type 40 [ 355.475889][T13417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.495650][T13417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.509756][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.575706][T13417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.733858][T13417] hsr_slave_0: entered promiscuous mode [ 355.747465][T13417] hsr_slave_1: entered promiscuous mode [ 355.761307][T13417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.775337][T13417] Cannot create hsr debugfs directory [ 356.012364][T13417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.178143][T13417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.294071][T13417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.367810][ T5123] Bluetooth: hci10: command tx timeout [ 356.401104][T13417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.587987][T13488] x_tables: unsorted underflow at hook 2 [ 356.673428][T13417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.796760][T13417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.838460][T13417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.897328][T13417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.238975][T13417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.265808][T13513] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.333277][T13417] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.402312][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.409666][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.479041][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.487318][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.907702][T13528] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.116441][ T5132] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 358.140741][ T5132] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 358.155438][ T5132] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 358.167957][ T5132] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 358.178353][ T5132] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 358.192924][T13417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.198623][ T5132] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 358.306799][T12783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.456888][ T5123] Bluetooth: hci10: command tx timeout [ 358.475069][T12783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.660085][T12783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.803794][T12783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.161935][T13417] veth0_vlan: entered promiscuous mode [ 359.256115][T13564] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.370623][T13534] chnl_net:caif_netlink_parms(): no params data found [ 359.389443][T13417] veth1_vlan: entered promiscuous mode [ 359.389512][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.410965][T12783] bridge_slave_1: left allmulticast mode [ 359.435417][T12783] bridge_slave_1: left promiscuous mode [ 359.452982][T12783] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.476826][T12783] bridge_slave_0: left allmulticast mode [ 359.484519][T12783] bridge_slave_0: left promiscuous mode [ 359.501997][T12783] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.723306][T13572] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.283711][T12783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.294358][ T5123] Bluetooth: hci8: command tx timeout [ 360.309383][T12783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.324849][T12783] bond0 (unregistering): Released all slaves [ 360.501763][T12783] bond1 (unregistering): Released all slaves [ 360.527317][ T5123] Bluetooth: hci10: command tx timeout [ 360.911737][T13587] syzkaller0: entered promiscuous mode [ 360.922087][T13587] syzkaller0: entered allmulticast mode [ 360.951150][T13587] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 361.024351][T13534] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.044330][T13534] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.054333][T13534] bridge_slave_0: entered allmulticast mode [ 361.063257][T13534] bridge_slave_0: entered promiscuous mode [ 361.103326][T13534] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.116908][T13534] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.124491][T13534] bridge_slave_1: entered allmulticast mode [ 361.139057][T13534] bridge_slave_1: entered promiscuous mode [ 361.207595][T12783] hsr_slave_0: left promiscuous mode [ 361.229340][T12783] hsr_slave_1: left promiscuous mode [ 361.243994][T12783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.254644][T12783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.267000][T12783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.277488][T12783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.304675][T12783] veth1_macvtap: left promiscuous mode [ 361.315227][T12783] veth0_macvtap: left promiscuous mode [ 361.322147][T12783] veth1_vlan: left promiscuous mode [ 361.329486][T12783] veth0_vlan: left promiscuous mode [ 362.036340][T12783] team0 (unregistering): Port device team_slave_1 removed [ 362.094233][T12783] team0 (unregistering): Port device team_slave_0 removed [ 362.358395][ T5123] Bluetooth: hci8: command tx timeout [ 362.601140][ T5123] Bluetooth: hci10: command tx timeout [ 362.646406][T13534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.658573][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 362.694572][T13534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.802430][T13417] veth0_macvtap: entered promiscuous mode [ 362.834300][T13534] team0: Port device team_slave_0 added [ 362.853539][T13534] team0: Port device team_slave_1 added [ 362.865330][T13417] veth1_macvtap: entered promiscuous mode [ 362.975500][T13534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.991219][T13534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.039693][T13534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.104452][T13534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.114528][T13534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.147342][T13534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.168005][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.186744][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.205555][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.224107][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.235545][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.250103][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.265255][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.278362][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.296803][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.312333][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.331760][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.345458][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.356346][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.369783][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.386301][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.403331][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.417036][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.435889][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.453148][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.469883][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.497277][T13417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.540070][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.577160][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.591403][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.631702][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.660491][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.675238][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.690996][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.710164][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.725287][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.743450][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.766991][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.785529][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.802029][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.818478][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.834150][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.850783][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.865717][T13417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.879341][T13417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.906462][T13417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.958999][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.990260][T13417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.023631][T13417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.046943][T13417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.066993][T13417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.075621][T13626] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.134135][T13534] hsr_slave_0: entered promiscuous mode [ 364.143358][T13534] hsr_slave_1: entered promiscuous mode [ 364.154726][T13534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.170266][T13534] Cannot create hsr debugfs directory [ 364.398234][T12787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.421600][T12787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.438527][ T5123] Bluetooth: hci8: command tx timeout [ 364.554602][T12786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.568884][T12786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.628276][T13633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.942424][T13534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.988265][T13534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.035576][T13534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.084112][T13534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.144635][T13651] syzkaller0: entered promiscuous mode [ 365.158332][T13651] syzkaller0: entered allmulticast mode [ 365.484682][T13660] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.722193][T13534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.788174][T13534] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.826934][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.836469][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.899801][T13678] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.968277][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.975824][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.274287][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.392022][T13534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.517809][ T5123] Bluetooth: hci8: command tx timeout [ 366.557630][T13534] veth0_vlan: entered promiscuous mode [ 366.626385][T13534] veth1_vlan: entered promiscuous mode [ 366.747256][T13718] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 366.760425][T13534] veth0_macvtap: entered promiscuous mode [ 366.809891][T13534] veth1_macvtap: entered promiscuous mode [ 366.867535][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.909791][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.944502][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.980100][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.995011][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.011116][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.028944][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.063303][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.082128][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.096201][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.120636][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.135545][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.149108][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.167818][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.185598][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.199052][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.209328][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.233000][T13740] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.239001][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.264218][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.285367][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.304779][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.323673][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.339530][T13534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.354944][T13722] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.369662][T13722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.384908][T13722] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 367.436798][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.455714][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.472621][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.488882][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.503105][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.522141][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.540249][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.553701][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.572586][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.584727][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.598296][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.609945][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.621187][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.634646][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.649131][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.663233][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.673161][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.686029][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.703336][T13534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.716158][T13534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.728700][T13534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.858119][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.910858][T13534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.937129][T13534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.966983][T13534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.991055][T13534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.126049][T13753] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.262060][T12783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.289001][T12783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.409370][T12787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.433280][T12787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.690161][T13778] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.709961][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.725261][T13778] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 368.754089][T13780] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.826000][T13783] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.912271][T13785] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.921573][T13778] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.232820][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 369.915503][T13820] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.189724][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.274948][T13838] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 371.698617][ T29] audit: type=1804 audit(1718136287.960:6): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir719208414/syzkaller.yHTByX/115/cgroup.controllers" dev="sda1" ino=1983 res=1 errno=0 [ 371.743520][ T29] audit: type=1804 audit(1718136287.990:7): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir719208414/syzkaller.yHTByX/115/cgroup.controllers" dev="sda1" ino=1983 res=1 errno=0 [ 371.799867][ T29] audit: type=1804 audit(1718136288.060:8): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir719208414/syzkaller.yHTByX/115/cgroup.controllers" dev="sda1" ino=1983 res=1 errno=0 [ 371.926320][ T29] audit: type=1804 audit(1718136288.180:9): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir719208414/syzkaller.yHTByX/115/cgroup.controllers" dev="sda1" ino=1983 res=1 errno=0 [ 371.967351][ T29] audit: type=1804 audit(1718136288.180:10): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir719208414/syzkaller.yHTByX/115/cgroup.controllers" dev="sda1" ino=1983 res=1 errno=0 [ 372.185757][T13889] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 372.318452][T13897] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 372.331289][T13898] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 372.905293][ T29] audit: type=1804 audit(1718136289.160:11): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir963857979/syzkaller.fMpQTD/12/cgroup.controllers" dev="sda1" ino=1982 res=1 errno=0 [ 372.959127][ T29] audit: type=1804 audit(1718136289.210:12): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir963857979/syzkaller.fMpQTD/12/cgroup.controllers" dev="sda1" ino=1982 res=1 errno=0 [ 373.034675][ T29] audit: type=1804 audit(1718136289.280:13): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir963857979/syzkaller.fMpQTD/12/cgroup.controllers" dev="sda1" ino=1982 res=1 errno=0 [ 373.156083][ T29] audit: type=1804 audit(1718136289.410:14): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir963857979/syzkaller.fMpQTD/12/cgroup.controllers" dev="sda1" ino=1982 res=1 errno=0 [ 373.206320][T13920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.258023][ T29] audit: type=1804 audit(1718136289.410:15): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir963857979/syzkaller.fMpQTD/12/cgroup.controllers" dev="sda1" ino=1982 res=1 errno=0 [ 373.928989][T13950] __nla_validate_parse: 8 callbacks suppressed [ 373.929008][T13950] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.953551][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.984192][T13950] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 374.187809][T13951] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 374.397159][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 375.149337][T14008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.630274][T14023] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.653168][T14023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.686122][T14023] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 375.773502][T14028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.854341][T14023] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.150246][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.211831][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.655993][T14097] batadv_slave_1: entered promiscuous mode [ 377.682553][T14096] batadv_slave_1: left promiscuous mode [ 379.325235][T14168] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 379.353152][T14168] x_tables: ip_tables: osf match: only valid for protocol 6 [ 379.417532][ T29] audit: type=1804 audit(1718136295.670:16): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir719208414/syzkaller.yHTByX/140/memory.events" dev="sda1" ino=1984 res=1 errno=0 [ 379.474861][ T29] audit: type=1800 audit(1718136295.670:17): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1984 res=0 errno=0 [ 379.501698][T14172] __nla_validate_parse: 13 callbacks suppressed [ 379.501717][T14172] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 379.532620][T14172] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 379.571857][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.828812][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.219460][T14208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.219873][T14210] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 380.241124][T14210] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.726012][T14260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.393047][T14285] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 382.402261][T14285] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.464143][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.474701][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.485942][T14290] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 382.631646][T14291] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.184566][T14305] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.871953][T14365] x_tables: ip_tables: osf match: only valid for protocol 6 [ 385.226218][ T5132] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 385.240824][ T5132] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 385.262320][ T5132] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 385.288100][ T5132] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 385.305232][ T5132] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 385.316794][ T5132] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 385.538792][T14386] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 386.011207][T14379] chnl_net:caif_netlink_parms(): no params data found [ 386.234068][T14408] x_tables: ip_tables: osf match: only valid for protocol 6 [ 386.291929][T14413] __nla_validate_parse: 3 callbacks suppressed [ 386.291949][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 386.360899][T14379] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.386042][T14379] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.396035][T14379] bridge_slave_0: entered allmulticast mode [ 386.411056][T14379] bridge_slave_0: entered promiscuous mode [ 386.422840][T14379] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.436607][T14379] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.446440][T14379] bridge_slave_1: entered allmulticast mode [ 386.455935][T14379] bridge_slave_1: entered promiscuous mode [ 386.560890][T14379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.575758][T14379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.670182][T14379] team0: Port device team_slave_0 added [ 386.684781][T14379] team0: Port device team_slave_1 added [ 386.760326][T14379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.777082][T14379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.841653][T14379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.881534][T14379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.891208][T14379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.922679][T14379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.019224][T14379] hsr_slave_0: entered promiscuous mode [ 387.033765][T14379] hsr_slave_1: entered promiscuous mode [ 387.049228][T14379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.081815][T14379] Cannot create hsr debugfs directory [ 387.225385][T14426] hsr0: entered promiscuous mode [ 387.397609][ T5132] Bluetooth: hci11: command tx timeout [ 387.561738][T14428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.727565][T14379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.848545][T14379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.024239][T14379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.156017][T14379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.489449][T14379] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.538783][T14379] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.583466][T14379] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.638202][T14379] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.065463][T14379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.154705][T14379] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.189376][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.204131][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.255451][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.264356][ T4866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.477268][ T5132] Bluetooth: hci11: command tx timeout [ 389.814398][T14379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.851368][T14464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.955861][T14379] veth0_vlan: entered promiscuous mode [ 389.996174][T14379] veth1_vlan: entered promiscuous mode [ 390.091779][T14379] veth0_macvtap: entered promiscuous mode [ 390.141295][T14379] veth1_macvtap: entered promiscuous mode [ 390.191702][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.235634][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.256958][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.277348][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.306163][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.331500][T14466] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.360994][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.387010][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.408542][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.464909][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.522363][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.550499][T14468] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 390.565893][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.594851][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.630764][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.661761][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.686600][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.714710][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.742901][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.771855][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.801216][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.829652][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.860792][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.890420][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.920970][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.985063][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.032474][T14379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.169593][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.227016][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.267108][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.300441][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.325415][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.358226][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.383831][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.406964][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.434803][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.466689][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.486967][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.516977][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.538537][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.557958][ T5132] Bluetooth: hci11: command tx timeout [ 391.576418][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.597891][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.621414][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.644511][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.681977][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.705814][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.730119][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.751525][T14379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.779369][T14379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.820725][T14379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.882891][T14379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.907658][T14379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.926231][T14379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.945416][T14379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.132063][T12787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.140245][T12787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.198412][T12784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.207148][T12784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.388356][T14491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.432379][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 392.457273][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.467919][T14495] erspan0: entered promiscuous mode [ 392.478996][T14495] erspan0: entered allmulticast mode [ 392.485684][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.496809][T14495] erspan0: left promiscuous mode [ 392.503969][T14495] erspan0: left allmulticast mode [ 392.707531][T14500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.469155][T14509] ------------[ cut here ]------------ [ 393.475020][T14509] refcount_t: decrement hit 0; leaking memory. [ 393.517877][T14509] WARNING: CPU: 1 PID: 14509 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 393.527702][T14509] Modules linked in: [ 393.531635][T14509] CPU: 1 PID: 14509 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 393.542376][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 393.552952][T14509] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 393.560108][T14509] Code: b2 00 00 00 e8 e7 ac e6 fc 5b 5d c3 cc cc cc cc e8 db ac e6 fc c6 05 4e 66 e8 0a 01 90 48 c7 c7 20 a5 1f 8c e8 47 db a8 fc 90 <0f> 0b 90 90 eb d9 e8 bb ac e6 fc c6 05 2b 66 e8 0a 01 90 48 c7 c7 [ 393.580576][T14509] RSP: 0018:ffffc9001f687b68 EFLAGS: 00010246 [ 393.586676][T14509] RAX: 275689a165b74500 RBX: ffff888078f10664 RCX: ffff88802ccf8000 [ 393.594733][T14509] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 393.604154][T14509] RBP: 0000000000000004 R08: ffffffff815857a2 R09: fffffbfff1c39994 [ 393.612991][T14509] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff888078f10620 [ 393.621072][T14509] R13: 0000000000000000 R14: ffff888078f10664 R15: dffffc0000000000 [ 393.629380][T14509] FS: 000055555db9b480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 393.640978][T14509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.648043][T14509] CR2: 00007f2c39b85478 CR3: 0000000023b84000 CR4: 00000000003506f0 [ 393.652229][ T5132] Bluetooth: hci11: command tx timeout [ 393.656102][T14509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 393.656141][T14509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 393.656156][T14509] Call Trace: [ 393.656166][T14509] [ 393.656176][T14509] ? __warn+0x163/0x4e0 [ 393.656245][T14509] ? refcount_warn_saturate+0xfa/0x1d0 [ 393.656278][T14509] ? report_bug+0x2b3/0x500 [ 393.656376][T14509] ? refcount_warn_saturate+0xfa/0x1d0 [ 393.656408][T14509] ? handle_bug+0x3e/0x70 [ 393.656467][T14509] ? exc_invalid_op+0x1a/0x50 [ 393.656493][T14509] ? asm_exc_invalid_op+0x1a/0x20 [ 393.721055][T14509] ? __warn_printk+0x292/0x360 [ 393.725863][T14509] ? refcount_warn_saturate+0xfa/0x1d0 [ 393.731435][T14509] ? refcount_warn_saturate+0xf9/0x1d0 [ 393.736988][T14509] ref_tracker_free+0x6af/0x7e0 [ 393.741963][T14509] ? __pfx_ref_tracker_free+0x10/0x10 [ 393.747469][T14509] ax25_release+0x368/0x950 [ 393.752082][T14509] sock_close+0xbc/0x240 [ 393.756436][T14509] ? __pfx_sock_close+0x10/0x10 [ 393.761393][T14509] __fput+0x406/0x8b0 2024/06/11 20:05:09 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 393.765444][T14509] task_work_run+0x24f/0x310 [ 393.770137][T14509] ? __pfx_task_work_run+0x10/0x10 [ 393.775277][T14509] ? syscall_exit_to_user_mode+0xa3/0x370 [ 393.781125][T14509] syscall_exit_to_user_mode+0x168/0x370 [ 393.786788][T14509] do_syscall_64+0x100/0x230 [ 393.791534][T14509] ? clear_bhb_loop+0x35/0x90 [ 393.796281][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.803935][T14509] RIP: 0033:0x7f796b07cea9 [ 393.809256][T14509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 393.829017][T14509] RSP: 002b:00007ffe12099a68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 393.837525][T14509] RAX: 0000000000000000 RBX: 0000000000060044 RCX: 00007f796b07cea9 [ 393.845514][T14509] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 393.853581][T14509] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000e00000000 [ 393.861633][T14509] R10: 00007f796b000000 R11: 0000000000000246 R12: 00007f796b1b3f80 [ 393.869768][T14509] R13: 00007f796b1b3f8c R14: 0000000000000032 R15: 00007f796b1b5980 [ 393.878503][T14509] [ 393.881631][T14509] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 393.888903][T14509] CPU: 1 PID: 14509 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 393.899390][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 393.909533][T14509] Call Trace: [ 393.912807][T14509] [ 393.915732][T14509] dump_stack_lvl+0x241/0x360 [ 393.920425][T14509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.925641][T14509] ? __pfx__printk+0x10/0x10 [ 393.930330][T14509] ? vscnprintf+0x5d/0x90 [ 393.934679][T14509] panic+0x349/0x860 [ 393.938576][T14509] ? __warn+0x172/0x4e0 [ 393.942743][T14509] ? __pfx_panic+0x10/0x10 [ 393.947164][T14509] __warn+0x346/0x4e0 [ 393.951145][T14509] ? refcount_warn_saturate+0xfa/0x1d0 [ 393.956600][T14509] report_bug+0x2b3/0x500 [ 393.960934][T14509] ? refcount_warn_saturate+0xfa/0x1d0 [ 393.966419][T14509] handle_bug+0x3e/0x70 [ 393.970577][T14509] exc_invalid_op+0x1a/0x50 [ 393.975080][T14509] asm_exc_invalid_op+0x1a/0x20 [ 393.979933][T14509] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 393.986007][T14509] Code: b2 00 00 00 e8 e7 ac e6 fc 5b 5d c3 cc cc cc cc e8 db ac e6 fc c6 05 4e 66 e8 0a 01 90 48 c7 c7 20 a5 1f 8c e8 47 db a8 fc 90 <0f> 0b 90 90 eb d9 e8 bb ac e6 fc c6 05 2b 66 e8 0a 01 90 48 c7 c7 [ 394.005619][T14509] RSP: 0018:ffffc9001f687b68 EFLAGS: 00010246 [ 394.011699][T14509] RAX: 275689a165b74500 RBX: ffff888078f10664 RCX: ffff88802ccf8000 [ 394.019847][T14509] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 394.027815][T14509] RBP: 0000000000000004 R08: ffffffff815857a2 R09: fffffbfff1c39994 [ 394.035771][T14509] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff888078f10620 [ 394.043739][T14509] R13: 0000000000000000 R14: ffff888078f10664 R15: dffffc0000000000 [ 394.052266][T14509] ? __warn_printk+0x292/0x360 [ 394.057045][T14509] ? refcount_warn_saturate+0xf9/0x1d0 [ 394.062501][T14509] ref_tracker_free+0x6af/0x7e0 [ 394.067350][T14509] ? __pfx_ref_tracker_free+0x10/0x10 [ 394.072739][T14509] ax25_release+0x368/0x950 [ 394.077252][T14509] sock_close+0xbc/0x240 [ 394.081494][T14509] ? __pfx_sock_close+0x10/0x10 [ 394.086340][T14509] __fput+0x406/0x8b0 [ 394.090777][T14509] task_work_run+0x24f/0x310 [ 394.095388][T14509] ? __pfx_task_work_run+0x10/0x10 [ 394.100684][T14509] ? syscall_exit_to_user_mode+0xa3/0x370 [ 394.106407][T14509] syscall_exit_to_user_mode+0x168/0x370 [ 394.112047][T14509] do_syscall_64+0x100/0x230 [ 394.117275][T14509] ? clear_bhb_loop+0x35/0x90 [ 394.121955][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.127854][T14509] RIP: 0033:0x7f796b07cea9 [ 394.132274][T14509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 394.152143][T14509] RSP: 002b:00007ffe12099a68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 394.160568][T14509] RAX: 0000000000000000 RBX: 0000000000060044 RCX: 00007f796b07cea9 [ 394.168545][T14509] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 394.176529][T14509] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000e00000000 [ 394.184508][T14509] R10: 00007f796b000000 R11: 0000000000000246 R12: 00007f796b1b3f80 [ 394.192566][T14509] R13: 00007f796b1b3f8c R14: 0000000000000032 R15: 00007f796b1b5980 [ 394.200724][T14509] [ 394.204015][T14509] Kernel Offset: disabled [ 394.208656][T14509] Rebooting in 86400 seconds..